This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json) Hash identifier: 0cyBSVVouV44VadvaC/VvjW7KcvxcktipiAUunZrPik= Subject key identifier: 5C:E2:69:57:67:A3:BD:31:EE:6B:22:61:8E:12:A4:99:D9:33:B2:51 Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72 Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772 Certificate serial: 019AF12E0E00097847F72F29F63D41C7675C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft Manifest number: 0AAD Signing time: Sat 06 Dec 2025 01:01:58 +0000 Manifest this update: Sat 06 Dec 2025 01:01:58 +0000 Manifest next update: Sun 07 Dec 2025 01:01:58 +0000 Files and hashes: 1: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: FnKKFdWIWF3yLgIfaazFrqSaI4M4Fpcbnztnr6aarDg=) 2: qHEAWZ6N3iBzcK7IIzIjqot58Rk.roa (hash: n8u6jtIG9RsDk/UjBbBpLB8puiC2i8ky96Vt7ctj0eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0e:00:09:78:47:f7:2f:29:f6:3d:41:c7:67:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772 Validity Not Before: Dec 6 01:01:58 2025 GMT Not After : Dec 7 01:01:58 2025 GMT Subject: CN=5ce2695767a3bd31ee6b22618e12a499d933b251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:1b:55:53:13:f5:28:e1:83:f5:d2:f3:fb: a6:4b:b8:4c:eb:b5:bc:83:11:93:42:b5:37:b1:32: 54:56:a7:f6:3a:9b:8d:6d:75:5e:48:f4:3c:d5:ca: af:15:3e:9c:de:75:99:07:d4:27:4f:1e:a5:eb:c7: 15:5a:05:98:41:5f:b6:9f:44:1e:73:cf:90:22:cc: 4d:2e:83:c4:c9:71:09:71:ae:4a:93:02:8b:89:be: 3b:1c:03:91:a4:b9:8a:0f:e3:f2:3d:a4:dd:04:dc: e2:6b:0c:b6:18:0f:f0:d1:68:4d:5f:6e:49:9f:39: cf:34:1a:fa:f2:8a:fb:e1:fe:eb:eb:35:c7:28:8e: c6:ee:15:cb:39:af:33:76:0d:11:59:e7:7d:9e:ec: 6d:fd:17:2d:6d:ab:f2:76:f4:4d:b0:09:50:21:16: 55:48:30:a9:b7:4b:25:b1:f2:dc:97:87:4c:b6:0c: 36:2d:b0:10:3b:0d:3e:6d:f6:0f:4d:3d:83:9e:78: 3a:fe:cf:00:92:fa:8f:fe:e0:8d:2e:4e:79:45:21: 9d:42:b1:8e:e4:0d:96:32:0c:b0:0e:ed:5c:e5:86: 01:d4:e7:1c:6d:66:2e:ae:66:c8:40:40:8b:64:f8: cb:ee:0e:1c:17:6a:ff:d4:53:27:a9:bd:35:b1:f3: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E2:69:57:67:A3:BD:31:EE:6B:22:61:8E:12:A4:99:D9:33:B2:51 X509v3 Authority Key Identifier: keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:9f:80:f7:7a:10:7e:1a:d6:bb:b4:b5:ca:67:27:39:23:09: 72:dd:e2:31:12:d7:85:06:bc:1b:a1:ed:b2:f4:89:bc:7d:ba: 41:7b:f9:b8:1c:4c:07:d4:bf:ee:4c:7f:4d:bf:95:65:f0:71: 04:5a:91:8d:6e:27:95:af:93:89:eb:c8:06:fd:55:97:c9:6a: 79:14:3a:4c:74:43:ac:3f:1f:7c:c4:84:4d:d2:43:2b:77:bb: 37:4e:ad:d4:4b:6f:fe:5e:23:5d:5d:cf:e9:82:c1:19:1a:e0: 23:f3:cb:a4:d5:6b:32:6f:b1:95:e8:f7:c7:56:e0:6d:29:f0: 16:3d:b6:6d:72:9f:8b:c4:ae:27:de:77:a8:1c:4f:76:08:e3: 07:52:c2:5c:34:29:b7:02:f7:78:a1:5e:19:0e:96:eb:58:93: 7c:bb:2e:46:ce:17:20:03:32:ac:b6:64:e1:8a:30:d9:eb:78: 46:cc:f5:1d:f3:40:ad:49:4c:81:1f:5f:f0:d6:09:03:c5:09: 95:f8:10:c8:7e:65:37:1d:34:df:55:8a:8c:38:15:ca:05:35: 89:83:46:4e:c5:82:ae:fc:89:b2:9f:0a:e9:a1:07:e5:93:a9: e3:52:aa:5d:06:6b:0e:c7:a3:c1:f7:03:7b:be:26:2f:e8:78: ab:c0:db:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLg4ACXhH9y8p9j1Bx2dcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNzNiZDI0ZmQ4MzA4ODZiZmEyZDI5NjE0MTZkMjE4NWRl MzM3NzIwHhcNMjUxMjA2MDEwMTU4WhcNMjUxMjA3MDEwMTU4WjAzMTEwLwYDVQQD Eyg1Y2UyNjk1NzY3YTNiZDMxZWU2YjIyNjE4ZTEyYTQ5OWQ5MzNiMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFAbVVMT9Sjhg/XS8/umS7hM67W8 gxGTQrU3sTJUVqf2OpuNbXVeSPQ81cqvFT6c3nWZB9QnTx6l68cVWgWYQV+2n0Qe c8+QIsxNLoPEyXEJca5KkwKLib47HAORpLmKD+PyPaTdBNziawy2GA/w0WhNX25J nznPNBr68or74f7r6zXHKI7G7hXLOa8zdg0RWed9nuxt/RctbavydvRNsAlQIRZV SDCpt0slsfLcl4dMtgw2LbAQOw0+bfYPTT2Dnng6/s8AkvqP/uCNLk55RSGdQrGO 5A2WMgywDu1c5YYB1OccbWYurmbIQECLZPjL7g4cF2r/1FMnqb01sfP42wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFziaVdno70x7msiYY4SpJnZM7JRMB8GA1UdIwQY MBaAFGxzvST9gwiGv6LSlhQW0hhd4zdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYt NzNhMTU3YTJiOTlmLzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYtNzNhMTU3YTJiOTlm LzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZ+A93oQ fhrWu7S1ymcnOSMJct3iMRLXhQa8G6HtsvSJvH26QXv5uBxMB9S/7kx/Tb+VZfBx BFqRjW4nla+TievIBv1Vl8lqeRQ6THRDrD8ffMSETdJDK3e7N06t1Etv/l4jXV3P 6YLBGRrgI/PLpNVrMm+xlej3x1bgbSnwFj22bXKfi8SuJ953qBxPdgjjB1LCXDQp twL3eKFeGQ6W61iTfLsuRs4XIAMyrLZk4Yow2et4Rsz1HfNArUlMgR9f8NYJA8UJ lfgQyH5lNx0031WKjDgVygU1iYNGTsWCrvyJsp8K6aEH5ZOp41KqXQZrDsejwfcD e74mL+h4q8Dbxg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:38 2025 by rpki-client